Natural Language Processing custom policy reference
If the system policies do not meet your requirements, you can create custom policies to achieve least privilege. Custom policies provide fine-grained permission control and are an effective way to improve resource access security. This topic describes scenarios and provides policy examples for using custom policies with <Service Name>.
What is a custom policy?
Resource Access Management (RAM) policies are classified into system policies and custom policies. You can manage custom policies based on your business requirements.
After you create a custom policy, you must attach the policy to a RAM user, RAM user group, or RAM role. This way, the permissions that are specified in the policy can be granted to the principal.
You can delete a RAM policy that is not attached to a principal. If the RAM policy is attached to a principal, before you can delete the RAM policy you must detach the RAM policy from the principal.
Custom policies support version control. You can manage custom policy versions based on the version management mechanism provided by RAM.
References
Common scenarios and examples for custom policies
Policy scenarios and examples
Example 1: Create a custom policy by entering a policy script.
{
"Statement": [
{
"Effect": "Allow",
"Action": "nlp-automl:*",
"Resource": "*"
}
],
"Version": "1"
}Authorization information reference
To use custom policies, you must understand the permission control requirements of your business and the authorization information for Natural Language Processing. For more information, see Grant permissions to a RAM user.